CCIE-level network operations inside Cursor. Troubleshooting, upgrade planning, config audit, and device configuration — grounded in live vendor documentation, release notes, and CVE data instead of the model's memory.
Your AI writes the MOP. Damira makes sure it's true.
agent plugin marketplace add https://github.com/ciscoittech/damira-pluginsThen /plugins in the Cursor agent, or Settings → Plugins in the IDE, and install
damira. A shared demo key (50 queries/day) is built in, so it works immediately.
Ask it something real:
my OSPF adjacency is stuck in EXSTART between a 4451 and a Nexus 9k
You'll get a structured diagnosis — most-probable causes ranked, the exact vendor-specific commands to run, and verification steps that prove the fix. Not "check the config."
Advisor mode is the default and a device gate enforces it. The plugin ships a hook that blocks the agent from SSHing to network gear — including when the agent is run with every safety flag disabled. Damira recommends the exact commands; the engineer runs them and pastes the output back.
Three more things engineers rightfully ask about:
- Config audits run locally.
config-auditis a bundled script — your configs never leave your machine. - Refusals are never answers. If the backend returns anything that isn't a real answer — an error, a refusal, an empty response — the tools exit non-zero and the agent is told not to use it as source material. No confident documents built on failures.
- No hidden toolchain. No PyPI, no pip, no uvx. Standard-library Python scripts only.
| Skill | What it does |
|---|---|
troubleshoot |
Structured diagnosis with ranked root causes and vendor-specific CLI — plus incident report and runbook templates |
upgrade-plan |
Upgrade assessment from real release notes and CVE data — plus MOP and change control templates |
config-audit |
Local config security audit; findings grouped by severity with remediation |
generate-config |
Device configuration for Cisco, Juniper, Arista, Palo Alto, and Fortinet |
generate-playbook |
Ansible playbooks for network automation |
generate-lab |
ContainerLab topologies to rehearse a change before the maintenance window |
How the division of labor works: Damira supplies the domain data — vendor docs, CVE lookups, version-specific caveats, structured diagnoses. Your AI assembles that into the deliverables your change process actually requires: MOPs, change controls, runbooks, incident reports. The templates for those documents are bundled, built on CCIE and ITIL practice.
The demo key is for kicking the tires. For real use:
export DAMIRA_API_KEY='oncall_sk_...' # add to ~/.zshrc or ~/.bashrcGet a key at damiraai.com. One export line —
the plugin README explains exactly why it's an export and not
a settings field, along with setup for the optional MCP server (damira install-mcp),
which brings the same tools to Claude Desktop, Claude Code, and Windsurf.
Cisco (IOS/NX-OS and CUCM for voice), Juniper Junos, Arista EOS, Palo Alto PAN-OS, Fortinet FortiOS.
- Bugs and feature requests: Issues
- Product and pricing: damiraai.com
MIT
